From: Lévai, Dániel <leva@ecentrum.hu>
Subject: Re: [UPDATE]: security/kc - enable YubiKey support, add -yubikey flavor
To: OpenBSD ports <ports@openbsd.org>
Date: Wed, 27 Mar 2024 15:33:04 +0000

> Hi all,
>
> This is a patch to enable YubiKey support with a new -yubikey flavor.
> I invite anyone to test it; it works for me(tm), but requires some fiddling with the USB device files - hence the package message.
>
> Any ideas, suggestions are welcome,
> Daniel

Barring any objections, issues, what do you think about committing?

Daniel
diff --git a/security/kc/Makefile b/security/kc/Makefile
index ac9e76e7e60..f1fdbbd2676 100644
--- a/security/kc/Makefile
+++ b/security/kc/Makefile
@@ -11,6 +11,9 @@ MAINTAINER =	LEVAI Daniel <leva@ecentrum.hu>
 # BSD
 PERMIT_PACKAGE =		Yes
 
+FLAVORS=		yubikey
+FLAVOR?=
+
 WANTLIB += c crypto curses edit scrypt util xml2
 
 LIB_DEPENDS =	textproc/libxml \
@@ -18,6 +21,15 @@ LIB_DEPENDS =	textproc/libxml \
 
 MAKE_ENV +=	OS_OPENBSD=yes HAVE_LIBSCRYPT=yes
 
+.if ${FLAVOR:Myubikey}
+WANTLIB += ykpers-1 yubikey
+
+LIB_DEPENDS +=	security/yubico/yubikey-personalization \
+		security/yubico/yubico-c
+
+MAKE_ENV +=	HAVE_YUBIKEY=yes
+.endif
+
 post-install:
 	${INSTALL_DATA_DIR} ${PREFIX}/share/doc/kc
 	${INSTALL} ${WRKBUILD}/Changelog.md ${PREFIX}/share/doc/kc/
diff --git a/security/kc/pkg/MESSAGE b/security/kc/pkg/MESSAGE
index 345fc451266..303ac67cddb 100644
--- a/security/kc/pkg/MESSAGE
+++ b/security/kc/pkg/MESSAGE
@@ -1 +1,3 @@
 Please read ${PREFIX}/share/doc/kc/Changelog.md to see why you might not be able to open your database anymore.
+
+Using YubiKey support with the -yubikey flavor requires read/write access to the /dev/usb? and /dev/ugen?.?? devices.